Privacy Policy

Last updated September 8, 2026

Who we are
What this policy covers
What personal information we collect
How we collect personal information
How and why we use personal information
Who we share personal information with
Our lawful bases for using personal information
Payments and payment processors
Marketing emails, SMS/text messages and advertising
Cookies, analytics and tracking technologies
International transfers
How long we keep personal information
How we protect personal information
Your data protection rights
How to make a request or complaint
Children’s privacy
Links to other websites
Updates to this policy
Contact details

1. Who we are

This Privacy Policy explains how William Whitecloud International LLC, doing business as Natural Success, collects, uses, stores and shares personal information.

In this policy, “Natural Success”, “we”, “us” and “our” refer to William Whitecloud International LLC, operating under the name Natural Success.

We provide courses, coaching, events, online programmes, live in person trainings, retreats and related services in the field of Creative Development.

For the purposes of applicable data protection laws, including the UK General Data Protection Regulation and the EU General Data Protection Regulation, William Whitecloud International LLC is the data controller of the personal information described in this Privacy Policy. This means we are responsible for deciding how and why your personal information is used.

If you have any questions about this Privacy Policy or how we handle your personal information, you can contact us at:

Email: team@naturalsuccessacademy.com

Support: support@naturalsuccess.io

2. What this policy covers

This Privacy Policy applies when you interact with Natural Success, including when you:
visit our websites or related online services, including naturalsuccess.io, naturalsuccessacademy.com, and any Natural Success course pages, landing pages, checkout pages, membership pages, subdomains or other pages that link to this Privacy Policy;

join one of our mailing lists, waiting lists or interest lists;
register for, purchase or attend one of our courses, coaching programmes, memberships, live trainings, events or retreats;

access our course portals, membership areas or online learning spaces;
complete a form, survey, questionnaire, feedback form or application connected with our services;

attend a live session, webinar or online training hosted through platforms such as Zoom;

participate in a Natural Success Facebook group, Mighty Networks membership or other community space;

provide a testimonial, review, comment or feedback;

interact with our emails, advertisements, retargeting campaigns or online content.

This includes services and pages hosted through our own websites and through the third-party platforms we use to operate Natural Success, including Kartra, WordPress and GoHighLevel for course pages, landing pages, checkout pages and related online services, and other platforms for email communication, SMS/text messaging, payments, surveys, file storage, online meetings, video hosting, community spaces, memberships, advertising, analytics and administration.

3. What personal information we collect

The personal information we collect depends on how you interact with Natural Success. We only aim to collect the information we need to provide our services, communicate with you, process purchases, improve our work, and meet our legal and administrative obligations.

We may collect the following types of personal information:

Contact details

This may include your name, email address, phone number, country, time zone, billing address and other contact details you provide when you join a mailing list, register for a course, purchase a product or service, complete a form, contact us, or otherwise interact with Natural Success.

Phone numbers and SMS/text messages

If you provide your phone number to us, we may use it to contact you by phone call or SMS/text message where relevant to your interaction with Natural Success.

This may include service-related communications, such as course, event, retreat, payment, registration, scheduling, access, support or administrative messages.

Where permitted by applicable law, and where we have the required consent or other lawful basis, we may also use your phone number to send marketing or promotional SMS/text messages about our products, services, courses, events or retreats.

You can opt out of marketing SMS/text messages at any time by following the opt-out instructions in the message or by contacting us.

We do not sell your phone number or share it with third parties for their own independent marketing purposes.

Course, coaching, membership and event information

If you register for or take part in one of our courses, coaching programmes, memberships, live trainings, events or retreats, we may collect information connected with your registration and participation.

This may include the course, programme, membership or event you registered for, your attendance, access details, participation information, application details, form responses, survey responses, feedback, reflections, coaching-related communications, and any information you choose to share with us as part of that experience.

In coaching sessions, group sessions, course exercises, community spaces or related communications, you may choose to share personal information about your life, work, relationships, goals, challenges, experiences, beliefs, emotions, creative process or personal development. We will only use this information for the purpose of delivering, supporting, improving or administering the relevant service, unless you give us permission to use it for another purpose or the law allows or requires us to do so.

Some of our live trainings, webinars, masterclasses, group sessions or online events may be recorded. Where sessions are recorded, the recording may include your name, image, voice, comments, questions, chat messages or other participation information, depending on how you take part in the session.

We may also process related participation information from platforms such as Zoom, including registration details, attendance reports, chat logs, questions submitted, poll responses, survey responses and technical information connected with your participation.

We may keep attendance reports for certain courses, including advanced courses and, where relevant, foundation courses, for course administration, participation tracking, support and record-keeping purposes.

Where recordings are made available to participants, they may be available for a limited period, such as two weeks after the training or event, or for a longer period where recordings form part of an ongoing course, coaching programme, membership, private client group or learning resource library.

Recordings may be hosted through third-party platforms such as Zoom, Vimeo, Kartra, Facebook or other platforms we use to deliver or support our services. Access is limited to the relevant participants, clients, members or group, depending on the nature of the service. Participants are not permitted to download, copy, share or distribute the recordings unless we have given express permission.

Coaches, facilitators or team members may take notes during or after coaching sessions, trainings, group sessions, events or related communications where this is useful for delivering, supporting, administering or improving the relevant service.

Where relevant, we may also process account, access or support-related information, such as user IDs, login or access records, sign-up source, support ratings, feedback scores, profile images, preferences, or other information connected with your use of our services.

Payment and transaction information

If you purchase a product, course, membership, event, retreat or service from us, we may collect and retain payment-related information such as your name, email address, billing address, purchase history, order details, invoice details, transaction details, payment status, refund details, failed payment information, and limited card or payment information made available to us by our payment providers, such as card type, expiry date and the last four digits of a payment card.

Where you pay us by bank transfer, ACH or direct debit, we may also process information connected with that payment, such as the payer name, bank account details, payment reference, amount paid, payment date, invoice details and any related correspondence.

Payments made by card or online checkout are normally processed through third-party payment providers, including Stripe and/or Kartra. In limited circumstances, where a customer is unable to complete payment through the usual checkout process, we may receive card details directly for the sole purpose of processing that specific payment. We do not retain full card numbers or card security codes after the transaction has been processed. More information is provided in the “Payments and payment processors” section below.

Business contacts, partners, facilitators and suppliers

If you work with us as a partner, facilitator, contractor, supplier, service provider or business contact, we may process information connected with that relationship. This may include your name, business name, role, contact details, contract details, correspondence, services provided, invoices, payment records, tax or accounting information, and bank account details needed to make payments to you.

We use this information to manage our working relationship with you, administer contracts, process invoices and payments, keep appropriate business and accounting records, and comply with our legal and financial obligations.

Communications and support information

If you contact us by email, support desk, form, social media or another communication channel, we may collect the information you provide in that communication. This may include your contact details, your message, support request, administrative query, billing query, testimonial request, feedback or other information you choose to send us.

Forms, surveys and questionnaires

From time to time, we may ask you to complete forms, surveys, questionnaires, applications or feedback forms. These may be hosted through platforms such as Kartra, Zoom or Google Forms.

Unless we specifically state that a form or survey is anonymous, responses may be linked to your name, email address, course, event, membership or other interaction with Natural Success.

The information collected will depend on the form and may include your name, email address, course or event details, feedback, preferences, survey responses, reflections, comments and other information you choose to provide.

Some forms or applications, particularly those connected with in-person retreats, safaris or events, may ask for relevant health, mental health, dietary, accessibility, fitness or emergency contact information. We collect this information only where it is relevant to the nature of the event or service, including participant safety, suitability, support needs and event planning.

Community and membership information

If you participate in a Natural Success community space, such as a Facebook group, Mighty Networks membership or another online community connected with our services, we may process information connected with your participation.

This may include your name, profile information, posts, comments, responses, images, engagement, membership status, course or membership participation information, and any information you choose to share in that space.

Please remember that information you post in community spaces may be visible to other members of that community, depending on the settings and nature of the platform. The platform provider may also process your information in accordance with its own privacy policy and terms.

Natural Success does not have access to private messages sent directly between members within Mighty Networks.

Testimonials, reviews and feedback

If you provide a testimonial, review, comment, story, case study or other feedback, we may collect and use the information you provide, with your permission where required. This may include your name, image, business or role, testimonial content, course or service attended, and any other information you agree for us to use.

Website, email and technical information

When you visit our websites, course pages, landing pages, checkout pages or online services, our service providers and we may automatically collect certain technical and usage information. This may include your IP address, browser type, device type, operating system, time zone, pages visited, links clicked, email opens, email clicks, referral source, and information about how you interact with our websites, emails and online content.

Cookies, pixels and similar technologies may also be used for website functionality, analytics, advertising and retargeting. More information is provided in the “Cookies, analytics and tracking technologies” section below.

Marketing and advertising information

If you join our mailing list, register for a free or paid offering, attend an event, interact with our emails, or engage with our advertisements, we may process information about your communication preferences and interactions with our content. This may include whether you opened an email, clicked a link, joined a waiting list, registered for a course, responded to an offer, or interacted with an advertisement.

We may also use advertising tools, including Meta/Facebook retargeting tools, where permitted by applicable law and cookie consent requirements.

Sensitive or special category information

Most of the personal information we collect is not sensitive or special category information.

However, there may be times when we collect or receive more sensitive information from you. This may include information you provide through a course, coaching session, group session, exercise, survey, application, community space, recorded session, coaching note, testimonial, personal story or direct communication with us.

This may include information about your health, mental health, emotional wellbeing, relationships, personal history, life circumstances, beliefs, experiences or other sensitive personal matters.

For certain in-person events, retreats or safaris, we may ask you to provide relevant physical or mental health information, dietary requirements, accessibility needs, fitness information, emergency contact details or other information that helps us assess suitability, support participant safety, make appropriate arrangements, and respond appropriately if an issue arises before or during the event.

We only ask for this type of information where we believe it is relevant and necessary for the specific event or service. We ask that you do not provide sensitive information unless we request it or it is directly relevant to your participation, safety or support needs.

Where we collect or use sensitive or special category information, including health or mental health information, we will only do so where we have a lawful basis and, where required, an additional condition under applicable data protection law. This may include your explicit consent, where appropriate.

We will use this information only for the purpose for which it was provided, unless the law allows or requires otherwise. Access to this information will be limited to those who reasonably need it for coaching delivery, course support, administration, safety, suitability assessment, emergency response, legal or operational purposes.

Information we do not collect or store directly

We do not retain full debit or credit card numbers or card security codes after a payment has been processed. Card and online checkout payments are normally processed through our payment providers, such as Stripe and/or Kartra. In limited circumstances, where we receive card details directly to help process a payment, we do not retain the full card number or card security code after the transaction has been processed. More information is provided in the “Payments and payment processors” section below.

We do not intentionally collect information from children under 18.

We do not ask you to provide sensitive personal information unless it is needed for a specific purpose, such as retreat participation, accessibility support, safety, suitability assessment, or another service-related reason.

4. How we collect personal information

We collect personal information in different ways, depending on how you interact with Natural Success.

Information you provide directly

We collect personal information when you choose to provide it to us. This may happen when you join a mailing list or waiting list, register for a course or event, make a purchase, complete a form, submit a survey, contact us, participate in a coaching session or training, join a community space, provide feedback, or otherwise communicate with us.

Information collected through our services and platforms

We may collect information through the websites, course pages, landing pages, checkout pages, membership areas, forms, surveys, online trainings, community spaces and other platforms we use to provide our services.

This may include information collected through platforms such as Kartra, GoHighLevel, Pabbly, Stripe, Twilio, Zoom, Google Forms, Google Workspace, Vimeo, Mighty Networks, Facebook groups and other service providers we use to operate Natural Success.

Information collected automatically

When you visit our websites, course pages, landing pages, checkout pages, emails or online services, certain technical and usage information may be collected automatically. This may include information such as your IP address, device type, browser type, operating system, pages visited, links clicked, email opens, email clicks, referral source and other information about how you interact with our online content.

This information may be collected through cookies, pixels, analytics tools and similar technologies. More information is provided in the ‘Cookies, analytics and tracking technologies’ section below.

Information from payment providers

If you make a payment through one of our payment providers, such as Stripe or Kartra, we may receive limited payment-related information from that provider. This may include your name, email address, billing address, transaction details, payment status, invoice details, refund details and limited card information, such as the card type, expiry date and last four digits.

Card and online checkout payments are normally processed directly through our payment providers, and we do not usually receive full debit or credit card numbers or card security codes. In limited circumstances, where a customer is unable to complete payment through the usual checkout process, we may receive card details directly for the sole purpose of processing that specific payment. We do not retain full card numbers or card security codes after the transaction has been processed. More information is provided in the “Payments and payment processors” section below.

Information from bank transfers, invoices and business payments

If you pay us by bank transfer, or if we pay you as a partner, facilitator, contractor, supplier or service provider, we may receive information connected with that payment. This may include payer or payee name, bank account details, payment reference, invoice details, amount paid, payment date and related correspondence.

This information may be provided by you directly, included on an invoice, sent by email, or made available through a payment, banking or accounting platform.

Information from third-party platforms

If you interact with us through a third-party platform, such as Facebook, Instagram, Messenger, WhatsApp, Mighty Networks, Zoom, Vimeo or another platform connected with our services, we may receive information made available through that platform.

This may include your name, profile information, email address, phone number, participation information, comments, posts, messages, attendance information, survey responses, engagement data or other information you choose to share through that platform.

The information available to us may depend on your settings and the privacy terms of that platform.

Information from affiliates and referrals

If you are referred to Natural Success by an affiliate or referral partner, we may process information connected with that referral, such as the referring affiliate, referral link, purchase details, commission information and related tracking information.

Where possible, this information is managed through our own systems, such as Kartra.

We do not buy contact lists from data brokers or third-party list providers.

5. How and why we use personal information

We use personal information for the purposes described in this Privacy Policy. The way we use your information depends on how you interact with Natural Success.

We may use your personal information to:

provide our courses, coaching programmes, memberships, live trainings, events, retreats and related services;

give you access to course pages, membership areas, recordings, resources and other materials;

communicate with you about your registration, purchase, course, membership, event, retreat, payment, account or support request;

process purchases, payment plans, invoices, refunds, failed payments, transfers and other financial transactions;

manage our relationships with partners, facilitators, contractors, suppliers and business contacts, including contracts, invoices, payments and administration;

deliver live online sessions, webinars, group calls, coaching sessions, trainings and community experiences;

make recordings available to relevant participants, clients, members or groups for a limited period or, where applicable, for a longer period as part of an ongoing course, coaching programme, membership, private client group or learning resource library;

collect feedback, survey responses, testimonials, reviews and course reflections;

respond to enquiries, support requests, complaints, billing questions and administrative matters;

send service-related emails, SMS/text messages or other communications connected with something you have registered for, purchased or requested;

send marketing communications where permitted by applicable law, including emails, SMS/text messages, course updates, event invitations, newsletters, offers and announcements;

understand how people interact with our websites, emails, course pages, landing pages, advertisements and online services;

improve our courses, services, marketing, websites, customer experience and internal systems;

run advertising, retargeting, custom audience, similar audience or lookalike audience campaigns where permitted by applicable law;

administer Facebook groups, Mighty Networks memberships or other community spaces connected with our services;

assess suitability, safety, support needs, accessibility needs, dietary requirements, fitness requirements or emergency arrangements for in-person events, retreats or safaris;

organise, administer, promote, deliver and support joint programmes, partner offers, co-hosted events, retreats or safaris;

protect the security and integrity of our websites, systems, platforms, payments, communities and services;

prevent, detect or respond to fraud, misuse, unauthorised access, payment issues or other harmful activity;

keep appropriate business, tax, accounting, legal and compliance records;

enforce our terms, agreements and policies;

comply with applicable laws, regulations, legal obligations, court orders, regulatory requests or lawful authorities;

establish, exercise or defend legal claims where necessary.

6. Who we share personal information with

We only share personal information where this is necessary for the purposes described in this Privacy Policy, where you have given us permission, or where we are required or permitted to do so by law.

We may share personal information with the following categories of recipients:

Service providers and platforms

We use third-party service providers and platforms to operate Natural Success and deliver our services. These may include providers for website hosting, course pages, membership areas, email communication, SMS/text messaging, payment processing, customer relationship management, file storage, online meetings, video hosting, surveys, community spaces, advertising, analytics, accounting and administration.

This may include platforms such as Kartra, GoHighLevel, Pabbly, Stripe, Twilio, Google Workspace, Google Drive, Gmail, Google Forms, Zoom, Vimeo, Mighty Networks, Meta/Facebook, Messenger, WhatsApp, Discord, ClickUp, Trello, WordPress, AddEvent, Loom, Canva, TeamUp, Upwork, or other contractor/freelance platforms, affiliate tracking and referral management platforms, such as iDevAffiliate or others, AI-assisted drafting or support tools, payment and banking providers, website hosting providers, domain providers, and other service providers we use to operate our business.

Where we use AI-assisted drafting, support or productivity tools, these tools may be used to help draft, review, organise or improve internal or customer-facing communications. We aim to limit the personal information shared with these tools and to remove or anonymise identifying details where possible. We do not intentionally enter sensitive information into these tools unless there is a clear and specific reason, the use has been approved, and appropriate safeguards are in place.

Payment, banking and accounting providers

We may share payment and transaction information with payment processors, banking providers, accounting platforms, bookkeepers, accountants, tax advisers, professional advisers and financial administration providers where this is necessary to process payments, issue invoices, manage refunds, administer payment plans, keep accounting records, comply with tax obligations, or manage our financial affairs.

Coaches, facilitators, team members and contractors

We may share relevant personal information with Natural Success team members, coaches, facilitators, contractors, assistants, administrators, partners or service providers where they need access to that information to deliver, support, administer or improve our courses, coaching programmes, memberships, live trainings, events, retreats or related services.

This may include registration information, attendance information, course participation information, support queries, survey responses, retreat or safari information, accessibility or dietary requirements, and other information reasonably needed for the relevant role.

Access to personal information is limited to those who reasonably need it for their role.

Retreat, safari and event providers

Where you attend an in-person event, retreat or safari, we may share relevant personal information with providers involved in delivering or supporting that experience. This may include accommodation providers, transport providers, local operators, event staff, facilitators, emergency contacts, insurers, medical or safety support providers, or other parties involved in planning, safety, suitability assessment, logistics or emergency response.

We will only share health, mental health, dietary, accessibility, fitness or other sensitive information where it is relevant and necessary for the specific purpose, or where you have given consent where required.

Joint programmes, partner offers and co-hosted events

From time to time, we may run programmes, events, retreats, safaris or related offers in partnership with another organisation, facilitator, business partner or co-host.

Where this happens, we may share relevant personal information with that partner where it is necessary to promote, organise, administer, deliver or support the joint programme, event, retreat, safari or offer.

This may include information such as your name, contact details, registration details, payment or booking status, participation information, dietary requirements, accessibility needs, support needs, emergency contact information, and other information relevant to the specific programme, event, retreat, safari or offer.

Where health, mental health, dietary, accessibility, fitness or other sensitive information is involved, we will only share it where it is relevant and necessary for the specific purpose, or where you have given consent where required.

The partner organisation may also process your personal information in accordance with its own privacy policy and legal obligations.

Community and third-party platforms

If you participate in a Natural Success Facebook group, Mighty Networks membership or another community space, your profile information, posts, comments, images, responses and interactions may be visible to other members of that community, depending on the platform and the settings of that space.

These platforms may also process your information under their own terms and privacy policies.

Advertising and social media platforms

Where permitted by applicable law and, where required, consent, we may use advertising and social media platforms such as Meta/Facebook, Google Ads, YouTube Ads or similar platforms for advertising, retargeting, audience matching, campaign measurement and analytics.

This may involve sharing or making available limited personal information, such as email addresses, phone numbers, IP addresses, device information, browser information, page views, interactions with our websites or advertisements, and other online identifiers or event data.

Where we use Meta Business Tools, such as Meta Pixel, Natural Success and Meta may act as joint controllers for the collection of personal information through those tools and its transmission to Meta, in accordance with Meta’s Business Tools Terms and applicable controller addenda.

Meta may match the information collected through these tools with information it already holds about users of its services. We do not receive access to users’ private Meta/Facebook profiles from these platforms, but we may receive advertising performance information, audience insights or campaign reporting.

Advertising and social media platforms may also process personal information in accordance with their own privacy policies and legal obligations.

Professional advisers and legal purposes

We may share personal information with lawyers, accountants, auditors, insurers, tax advisers, consultants, regulators, authorities, courts, dispute resolution bodies or other professional advisers where this is necessary for legal, financial, insurance, regulatory, compliance, dispute, tax, accounting or business purposes.

Legal obligations, safety and protection

We may share personal information where we believe it is necessary to comply with the law, respond to lawful requests, protect the rights, safety or wellbeing of individuals, prevent fraud or misuse, protect our systems and services, enforce our agreements or policies, or establish, exercise or defend legal claims.

Business transfers

If Natural Success is involved in a merger, sale, restructuring, acquisition, transfer of assets, investment, financing, or similar business transaction, personal information may be shared or transferred as part of that transaction, subject to appropriate confidentiality and data protection safeguards where required.

7. Our lawful bases for using personal information

Where UK or EU data protection law applies, we only use your personal information where we have a lawful basis to do so.

Depending on the purpose, we may rely on one or more of the following lawful bases:

Consent

We may use your personal information where you have given us clear consent for a specific purpose. This may include, for example, receiving certain marketing communications, providing a testimonial, or allowing us to process certain health, mental health or other sensitive information where explicit consent is required.

You can withdraw your consent at any time. Withdrawing consent will not affect the lawfulness of any processing carried out before consent was withdrawn.

Performance of a contract

We may use your personal information where it is necessary to provide a product, course, coaching programme, membership, event, retreat or service you have purchased, registered for or requested from us.

This may include processing registrations, providing access to course materials, delivering live sessions, managing your account, administering payment plans, handling refunds, providing support, and communicating with you about the service.

Legal obligation

We may use your personal information where we need to comply with a legal obligation. This may include keeping appropriate tax, accounting, business and financial records, responding to lawful requests from regulators or authorities, complying with applicable laws, or meeting our legal responsibilities in relation to data protection, payments, contracts, complaints or disputes.

Legitimate interests

We may use your personal information where it is necessary for our legitimate business interests, provided those interests are not overridden by your rights, freedoms or interests.

This may include operating and improving Natural Success, responding to enquiries, providing customer support, managing our business relationships, understanding how people use our services, improving our courses and communications, protecting the security of our systems, preventing fraud or misuse, managing communities, requesting feedback, keeping appropriate business records, and sending relevant communications where permitted by law.

Where we rely on legitimate interests, we consider the nature of the information, the purpose of the processing, the likely expectations of the individual, and the potential impact on their privacy.

Vital interests

In rare situations, we may use personal information where it is necessary to protect someone’s life or physical safety. This may be relevant in an emergency connected with an in-person event, retreat, safari or other service.

Special category information

Where we process special category information, such as health or mental health information, we will also identify an additional condition under applicable data protection law.

This may include your explicit consent, where appropriate, or another condition available under applicable law.

We may process health, mental health, dietary, accessibility, fitness, emergency contact or related information where it is relevant to an in-person event, retreat or safari, including suitability assessment, participant safety, support needs, event planning, emergency response, legal obligations or the establishment, exercise or defence of legal claims.

We do not rely on public task as a lawful basis because we are not a public authority.

Examples of how our lawful bases may apply

Purpose	Lawful basis
To register you for a course, membership, event, retreat or service	Performance of a contract; legitimate interests where the service is free or pre-contractual
To provide course access, membership access, recordings, resources and support	Performance of a contract
To communicate with you about something you registered for, purchased or requested	Performance of a contract; legitimate interests
To process payments, payment plans, invoices, refunds, failed payments and bank transfers	Performance of a contract; legal obligation; legitimate interests
To keep tax, accounting, legal and business records	Legal obligation; legitimate interests
To respond to enquiries, support requests, complaints or administrative queries	Legitimate interests; performance of a contract where the query relates to a purchased or requested service
To manage relationships with partners, facilitators, contractors, suppliers, affiliates and service providers	Performance of a contract; legitimate interests; legal obligation
To run live trainings, group sessions, coaching sessions, webinars, masterclasses and online events	Performance of a contract; legitimate interests
To record trainings, sessions, webinars, masterclasses or events and make recordings available to relevant participants, clients, members or groups	Performance of a contract; legitimate interests
To collect feedback, course reflections, surveys and testimonials	Legitimate interests; consent where required, especially for public testimonials
To use testimonials, stories, images, comments or reviews in marketing	Consent
To send service-related emails, SMS/text messages or administrative communications	Performance of a contract; legitimate interests
To send marketing emails or marketing SMS/text messages	Consent, or legitimate interests where permitted by law and where applicable electronic marketing rules are met
To use cookies, pixels, analytics or retargeting tools	Consent where required for non-essential cookies or similar technologies; legitimate interests for limited necessary analytics or service improvement where permitted by law
To use customer lists for Meta/Facebook custom, matched, similar or lookalike audiences	Legitimate interests or consent, depending on the nature of the audience, the information used, the individual’s expectations, applicable marketing rules and any consent or opt-out requirements
To administer Facebook groups, Mighty Networks memberships or other community spaces	Performance of a contract; legitimate interests
To assess suitability, safety, accessibility, dietary, fitness or support needs for retreats or safaris To organise, administer, promote, deliver and support joint programmes, partner offers, co-hosted events, retreats or safaris	Performance of a contract; legitimate interests; explicit consent or another special category condition where health or mental health information is processed Performance of a contract; legitimate interests; consent or explicit consent where required, especially where health, mental health or other special category information is processed
To respond to emergencies during in-person events, retreats or safaris	Vital interests; legitimate interests; legal obligation where applicable
To protect our systems, communities, payments and services from fraud, misuse, unauthorised access or security issues	Legitimate interests; legal obligation where applicable
To establish, exercise or defend legal claims	Legitimate interests; legal obligation; and, where special category data is involved, the relevant special category condition

8. Payments and payment processors

If you purchase a product, course, membership, event, retreat or service from Natural Success, your payment may be processed through third-party payment providers, checkout platforms, banking providers or transfer services.

This may include payments made by card, ACH, direct debit or bank transfer. For larger purchases or certain services, we may accept payment by bank transfer.

Card and online checkout payments may be processed through platforms such as Stripe and/or Kartra. Kartra may be used to manage checkout pages, orders, course access and payment-related records, while card and online payment processing may be handled through Stripe.

Card and online checkout payments are normally processed directly through our payment providers. We do not intentionally store full debit or credit card numbers or card security codes after a payment has been processed.

In limited circumstances, where a customer is unable to complete payment through the usual checkout process, we may receive card details directly, for example by phone or another communication channel, solely for the purpose of processing that specific payment. Where this happens, we enter the payment details into our payment provider’s system and do not retain the full card number or card security code after the transaction has been processed.

We ask customers not to send full card details or card security codes by email, social media, messaging apps or other insecure channels. If we receive payment card details through these channels, we will take steps to process the payment where appropriate and delete or remove those details as soon as reasonably possible.

We may receive and retain limited payment-related information, such as your name, email address, billing address, purchase details, order history, invoice details, payment status, transaction ID, refund details, failed payment information, payment plan information, card type, card expiry date and the last four digits of your payment card, where this information is made available to us by our payment providers.

If you pay us by bank transfer, ACH or direct debit, we may process information connected with that payment, such as payer name, bank account details, payment reference, amount paid, payment date, invoice details and related correspondence.

If we pay you as a partner, facilitator, contractor, supplier, affiliate or service provider, we may process the information needed to administer that relationship and make payments to you. This may include your name, business name, contact details, invoice details, tax or accounting information, bank account details, payment records and commission information.

We may use payment, banking and transfer providers such as Stripe, Kartra, PayPal, Wise, Wells Fargo or other banking providers, depending on the nature of the payment or transaction.

We may store payment-related records, invoices and related correspondence in our business systems, including email, Google Drive, accounting systems and other internal administration tools.

We use payment and transaction information to process purchases, administer payment plans, issue invoices, manage refunds, pay partners, facilitators, contractors, suppliers and affiliates, collect outstanding payments, keep appropriate business and accounting records, prevent fraud, respond to billing enquiries, and comply with our legal and financial obligations.

Where payments are overdue, we may use internal collections processes and, where necessary, external collection agencies or professional advisers to help recover outstanding amounts.

We may share payment-related information with payment processors, checkout platforms, banking providers, transfer services, accounting providers, bookkeepers, accountants, professional advisers, tax authorities, regulators, collection agencies or other parties where this is necessary for payment processing, accounting, legal, regulatory, collections or business purposes.

Payment providers, checkout platforms, banking providers and transfer services may also process personal information in accordance with their own privacy policies and legal obligations.

9. Marketing emails and, where available, SMS/text messages

We may use your personal information to send you information about Natural Success, including courses, events, retreats, memberships, trainings, newsletters, resources, offers, updates and related services.

Marketing emails and SMS/text messages

We may send you marketing communications by email or SMS/text message where you have consented to receive them, or where we are otherwise permitted to do so under applicable law. SMS/text messages may be sent through platforms such as Twilio, Kartra or other SMS providers we use.

For UK and EU individuals, we will only send marketing emails where we have the required consent or where a lawful exception, such as the soft opt-in for similar products and services, applies. SMS/text messages are only used where available and permitted under applicable law.

The soft opt-in may apply where you have previously purchased from us, registered interest in our products or services, or entered into negotiations with us about similar products or services, and you were given a clear opportunity to opt out when your details were collected and in each marketing message we send.

You can unsubscribe from marketing emails at any time by using the unsubscribe link or contacting us. Where SMS/text messages are available, you can opt out by following the opt-out instructions in the message, replying STOP where available, or contacting us.

If you opt out of marketing communications, we may still send you service-related or administrative communications where necessary. This may include messages about a course, event, retreat, membership, purchase, payment, account, support request, safety matter, schedule change or other service you have registered for, purchased or requested.

We do not sell your phone number or share it with third parties for their own independent marketing purposes.

Service-related communications

Some communications are not marketing. We may send you service-related emails, SMS/text messages or other communications where they are needed to deliver or administer something you have registered for, purchased or requested.

This may include registration confirmations, access details, Zoom links, course reminders, event updates, retreat information, payment notices, failed payment reminders, support replies, policy updates, schedule changes, safety information or important administrative messages.

Affiliate and referral tracking

We may use affiliate or referral tracking tools, such as iDevAffiliate or others, to track referrals, affiliate links, commissions, purchases and related activity connected with our affiliate or partner programmes.

Email tracking and engagement information

When we send emails, we may collect information about how you interact with them. This may include whether an email was delivered, opened, clicked, bounced or unsubscribed from.

We use this information to understand engagement, manage our mailing lists, improve our communications, troubleshoot delivery issues, respect unsubscribe requests and send more relevant information.

Advertising, retargeting and similar audiences

We may use advertising platforms, including Meta/Facebook, Google Ads, YouTube Ads or other advertising, analytics and retargeting platforms, to promote Natural Success content, courses, events, retreats, memberships, trainings and related services.

Where permitted by applicable law, we may use advertising tools such as retargeting, custom audiences, matched audiences, similar audiences or lookalike audiences. This may involve using limited information we already hold, such as email addresses or phone numbers, to help advertising platforms match our existing contacts with users of their services, show relevant advertisements, measure advertising performance, and find people with similar interests or characteristics.

We do not receive access to users’ private profiles from these advertising platforms. We may receive advertising performance information, audience insights or campaign reporting.

Cookies, pixels and similar technologies

Our websites, landing pages, course pages, checkout pages, emails and online services may use cookies, pixels, tags, analytics tools and similar technologies. These may be used for website functionality, analytics, email engagement, advertising, retargeting, audience building, campaign measurement and improving our services.

Where required by applicable law, we will ask for your consent before using non-essential cookies, pixels or similar technologies. You can find more information in the “Cookies, analytics and tracking technologies” section below.

Your choices

You can unsubscribe from marketing emails at any time.

Where SMS/text messages are available, you can opt out at any time by following the opt-out instructions in the message, replying STOP where available, or contacting us.

You can manage cookies and similar technologies through our cookie banner or cookie settings, where available.

You may also be able to manage advertising preferences directly through platforms such as Meta/Facebook or Google.

You have the right to object to the use of your personal information for direct marketing.

You can also contact us to object to your email address or phone number being used for advertising audiences, including Meta/Facebook custom, matched, similar or lookalike audiences.

If you object, we will stop using your personal information for direct marketing purposes.

10. Cookies, analytics and tracking technologies

Our websites, landing pages, course pages, checkout pages, emails and online services may use cookies, pixels, tags, analytics tools and similar technologies.

Our websites may also use affiliate or referral tracking technologies to identify when someone has visited or purchased through an affiliate or partner link, and to help us calculate referral or commission payments.

These technologies may be used to operate our websites and services, remember preferences, understand how people interact with our content, improve our user experience, measure email and advertising performance, support analytics, retargeting and advertising through platforms such as Meta/Facebook, Google Ads, YouTube Ads, Google Analytics or similar tools, and show relevant advertisements. These technologies may collect or use information such as IP address, device information, browser information, page views, interactions, referral source, online identifiers, advertising identifiers and, where enabled, hashed contact details or event data.

Depending on the technology used, this may involve processing information such as your IP address, device information, browser information, pages visited, links clicked, email opens, email clicks, referral source, approximate location, and information about how you interact with our websites, emails, advertisements and online services.

Where required by applicable law, we will ask for your consent before using non-essential cookies, pixels or similar technologies.

You can find more information about the cookies and similar technologies we use, why we use them, and how you can manage your choices in the cookie banner or cookie settings available on our website.

11. International transfers

Natural Success is operated by William Whitecloud International LLC, a United States business. Because we work with clients, participants, partners, facilitators and service providers in different countries, your personal information may be transferred to, stored in, or accessed from countries outside the country where you live.

This may include the United States, United Kingdom, Australia, countries in the European Economic Area, and other countries where we or our service providers operate.

Some of the platforms and service providers we use may also process personal information internationally. This may include providers for payments, course delivery, email communication, file storage, video hosting, online meetings, community spaces, analytics, advertising, accounting, administration and customer support.

Where UK or EU data protection law applies and your personal information is transferred internationally, we will take steps designed to protect your personal information in accordance with applicable law.

Where required, this may include relying on an adequacy decision, standard contractual clauses, the UK International Data Transfer Agreement, the UK Addendum to the EU Standard Contractual Clauses, transfer risk assessments, or another lawful transfer mechanism available under applicable data protection law.

You can contact us if you would like more information about the safeguards we use for international transfers.

12. How long we keep personal information

We keep personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law.

How long we keep information depends on the type of information, the reason we collected it, the nature of our relationship with you, and any legal, accounting, tax, contractual, safety, dispute or compliance requirements that apply.

For example, we may keep:

customer, course, membership and event records for as long as needed to provide the relevant service and maintain appropriate business records;

payment, invoice, accounting and tax records for as long as required for legal, financial, tax and accounting purposes;

marketing records until you unsubscribe, opt out, withdraw consent, or we no longer have a valid reason to keep them;

suppression records where needed to make sure we do not contact you again after you unsubscribe or object to marketing;

support, enquiry and correspondence records for as long as needed to respond to you, manage our relationship, resolve issues and keep appropriate business records;

testimonials, reviews, stories, images or feedback for as long as we have permission to use them, or until they are no longer needed for the purpose for which they were provided;

recordings of trainings, webinars, masterclasses, group sessions or events for the period made available to participants, clients, members or private groups, unless we have a legitimate reason to keep them for longer;

attendance reports, chat logs, questions, poll responses, survey responses and related participation records for as long as needed for course administration, participant support, record-keeping, legal, compliance or business purposes;

health, mental health, dietary, accessibility, fitness, emergency contact or retreat/safari-related information only for as long as needed for the relevant event, safety, support, suitability, legal, insurance or dispute-related purpose.

When we no longer need personal information, we will delete it, anonymise it, or securely restrict access to it where deletion is not immediately possible, such as where information is held in backups or records that must be retained for legal, accounting or compliance purposes.

13. How we protect personal information

We take reasonable and appropriate steps to protect personal information from unauthorised access, loss, misuse, disclosure, alteration or destruction.

The measures we use may include access controls, password protection, account permissions, secure cloud storage, appropriate platform settings, internal procedures, staff and contractor guidance, and the use of trusted service providers.

Access to personal information is limited to people and service providers who need it for a legitimate business purpose, such as delivering, supporting, administering or improving Natural Success services, managing payments, providing customer support, meeting legal or accounting obligations, or supporting retreats, safaris, events and trainings.

We take additional care with information that may be more sensitive, such as health, mental health, accessibility, retreat, safari, payment or bank account information. Access to this information is limited to those who need it for the relevant purpose, such as suitability assessment, participant safety, support, administration, payment processing, emergency response, legal obligations or operational delivery.

Where coaches, facilitators or team members take notes during or after coaching sessions, trainings, events or related communications, those notes are used for the purpose of delivering, supporting or administering the relevant service.

No method of transmission over the internet or electronic storage is completely secure. While we take steps to protect personal information, we cannot guarantee absolute security.

If we become aware of a personal data breach, we will take steps to assess and respond to it in accordance with applicable data protection law.

14. Your data protection rights

Depending on where you live and how applicable data protection law applies, you may have rights in relation to your personal information, including the right to be informed about how we collect and use your personal information.

These may include the right to:

request access to the personal information we hold about you;

request correction of inaccurate or incomplete personal information;

request deletion of your personal information in certain circumstances;

request restriction of how we use your personal information in certain circumstances;

object to the use of your personal information in certain circumstances, including where we rely on legitimate interests;

object to the use of your personal information for direct marketing;

request transfer of your personal information to you or another organisation in a structured, commonly used and machine-readable format, where applicable;

withdraw consent at any time, where we rely on consent to process your personal information;

object to or request human review of certain automated decisions, where this right applies under applicable data protection law;

complain to a data protection regulator if you are unhappy with how we handle your personal information.

These rights are not absolute and may depend on the circumstances, the type of information involved, the reason we are using it, and any legal, contractual, accounting, safety, dispute or compliance obligations that apply.

If you opt out of marketing, we may still keep limited information to make sure we respect your opt-out request and do not contact you again for direct marketing.

15. How to make a request or complaint

If you would like to exercise your data protection rights, ask a question about this Privacy Policy, or make a complaint about how we handle your personal information, you can contact us at:

Email: team@naturalsuccessacademy.com

Support: support@naturalsuccess.io

We may ask you to provide information to help us confirm your identity before responding to a request.

Where UK or EU data protection law applies, we will usually respond to data protection rights requests within one month of receiving the request, or within one month of confirming your identity where this is needed. If a request is complex or we receive a number of requests from the same person, we may need longer to respond, as allowed by applicable law.

We will handle all data protection rights requests in accordance with applicable data protection law.

If you make a data protection complaint to us, we will acknowledge receipt of your complaint within 30 days. We will take appropriate steps to consider and respond to your complaint without undue delay, keep you informed where appropriate, and tell you the outcome.

If you are based in the United Kingdom and are unhappy with how we handle your personal information, you may have the right to complain to the UK Information Commissioner’s Office.

If you are based in the European Economic Area, you may have the right to complain to your local data protection supervisory authority.

We encourage you to contact us first so we have the opportunity to respond to your concern.

16. Children’s privacy

Natural Success services are intended for adults aged 18 and over.

We do not knowingly collect personal information from children under 18, and we do not knowingly market our services to children under 18.

If we become aware that we have collected personal information from a child under 18 without appropriate consent or another lawful basis, we will take reasonable steps to delete that information.

If you believe that a child has provided personal information to us, please contact us using the details in the “Contact us” section below.

17. Links to other websites and platforms

Our websites, emails, course pages, membership areas, community spaces and online services may contain links to websites, platforms, content or services that are operated by third parties.

This may include platforms such as payment providers, video hosting providers, social media platforms, community platforms, online meeting platforms, survey tools, advertising platforms or other external websites.

We are not responsible for the privacy practices, content, security or policies of third-party websites or platforms that we do not control.

We encourage you to read the privacy policies and terms of any third-party websites or platforms you choose to use.

18. Updates to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our services, systems, legal obligations, business practices or the way we handle personal information.

When we update this Privacy Policy, we will change the “Last updated” date at the top of the policy.

If we make material changes, we may take additional steps to notify you, such as posting a notice on our website or contacting you directly, where appropriate.

We encourage you to review this Privacy Policy from time to time so you understand how we collect, use, store and share personal information.

19. Contact us

If you have any questions about this Privacy Policy, how we handle personal information, or how to exercise your data protection rights, you can contact us at:

William Whitecloud International LLC, operating under the name Natural Success

Email: team@naturalsuccessacademy.com

Support: support@naturalsuccess.io